ci: Enable libc++ hardening in CMake build jobs on macOS

This may help catch out-of-bounds container access and similar bugs.
2 files changed